Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa
File:                     323830333a316538303a3a2f33322d3438203d3e203238313131.roa (raw, json)
Hash identifier:          9hQd8y8uel6wDnoUi05pXx6F77CjvwuO0Xvt4NsO4IQ=
Subject key identifier:   E5:92:19:63:C2:42:5B:32:D7:39:EF:7D:04:B9:F4:18:72:F2:B9:FC
Certificate issuer:       /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial:       02F18FA1B57EB7A7E2836CBF7270182173B703C0
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa
Signing time:             Tue 05 Mar 2024 17:55:43 +0000
ROA not before:           Tue 05 Mar 2024 17:50:43 +0000
ROA not after:            Tue 04 Mar 2025 17:55:43 +0000
asID:                     28111
IP address blocks:        2803:1e80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:8f:a1:b5:7e:b7:a7:e2:83:6c:bf:72:70:18:21:73:b7:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
        Validity
            Not Before: Mar  5 17:50:43 2024 GMT
            Not After : Mar  4 17:55:43 2025 GMT
        Subject: CN=E5921963C2425B32D739EF7D04B9F41872F2B9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:39:06:e9:cf:0b:c0:c6:51:4b:76:53:b8:
                    6f:0a:95:78:5b:8c:6b:99:ae:d9:c7:b4:2c:21:d2:
                    7e:51:0a:3d:e0:4f:ef:d3:17:c0:c9:51:bb:67:eb:
                    22:b1:6e:2f:8e:78:73:05:5b:af:8e:92:d4:2b:f0:
                    8f:e4:9f:cd:80:47:d1:c9:75:5c:56:1a:e5:5d:cc:
                    ce:bb:b7:04:78:19:13:2c:d9:42:c2:53:68:5a:32:
                    14:b4:57:94:94:57:e1:a5:a9:ae:d9:55:5d:42:43:
                    8e:7b:01:d4:47:1a:f7:c8:9e:26:54:25:f4:d1:5a:
                    4e:49:f8:94:08:59:0a:f3:d8:be:ac:c8:d7:a1:b1:
                    56:18:04:92:db:5f:ec:9f:1e:9c:0d:d3:6f:e5:cd:
                    ab:a3:7f:b8:5c:8d:fd:a8:f5:fb:9b:02:0f:1a:9b:
                    eb:97:52:f6:c2:97:9f:58:09:e4:0e:53:3d:31:a4:
                    d0:f2:c5:08:9b:fb:d6:65:25:95:74:70:22:63:75:
                    73:1e:af:d7:4a:23:bb:1d:14:cd:9f:8f:80:10:a4:
                    b5:9b:55:7f:11:cd:2a:bf:62:d1:0a:00:dc:aa:cb:
                    d9:38:5c:6f:8f:d8:4e:17:36:e1:22:f1:7e:07:c2:
                    af:ec:66:7e:26:ee:58:f2:d1:c3:32:23:14:af:2e:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:19:63:C2:42:5B:32:D7:39:EF:7D:04:B9:F4:18:72:F2:B9:FC
            X509v3 Authority Key Identifier:
                keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/323830333a316538303a3a2f33322d3438203d3e203238313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:f1:a2:4f:0f:d5:4f:06:d6:1f:5b:eb:54:c2:a2:dd:d1:
         03:62:6d:7d:70:d4:69:1a:17:64:ca:63:e0:6c:1b:ff:37:15:
         b8:c8:79:6a:cc:4f:c4:af:c4:fa:1f:aa:f5:1a:94:5b:19:32:
         bb:9c:88:47:bb:95:70:5e:b4:76:f5:4f:0c:67:ab:80:39:9d:
         72:a4:ca:28:da:35:64:9c:4f:ed:5e:57:04:80:7d:96:32:4e:
         b0:01:f7:6b:ae:78:f5:06:a5:cf:75:c4:12:eb:d8:8d:b1:0d:
         3e:23:b8:f4:d2:fe:5b:4d:65:e4:ae:0a:a4:82:06:2c:19:3e:
         b9:39:04:16:c6:f0:b3:8c:ec:ec:34:88:78:dd:d5:29:2d:09:
         8e:48:1e:bf:ad:60:65:12:e9:36:18:a3:70:27:4e:fd:67:7c:
         82:10:92:9d:5b:23:48:81:ff:6d:8d:ae:7a:33:58:bf:12:b0:
         1a:13:b7:a8:e7:91:18:c2:f3:82:e8:69:d0:be:d9:f8:cc:d9:
         0e:de:3f:3c:ee:83:6a:b3:31:34:30:ee:78:ca:03:03:7a:ed:
         43:b1:cb:18:77:2e:08:e6:32:73:26:4e:de:41:f9:f4:38:ee:
         2b:f1:a6:14:24:41:d4:0b:c3:f1:36:76:78:b4:9b:e6:db:71:
         7d:52:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org